@oneuptime/cli 14.0.64 → 14.0.66

package/build/dist/Index.js

@@ -127783,6 +127783,7 @@ var IconProp = /* @__PURE__ */ ((IconProp2) => {
   IconProp2["ChartPie"] = "ChartPie";
   IconProp2["Heartbeat"] = "Heartbeat";
   IconProp2["Waterfall"] = "Waterfall";
+  IconProp2["Timeline"] = "Timeline";
   IconProp2["ArrowDown"] = "ArrowDown";
   IconProp2["ArrowUp"] = "ArrowUp";
   IconProp2["ArrowLeft"] = "ArrowLeft";
@@ -140318,6 +140319,8 @@ var Project = class extends TenantModel {
     this.enableAutomaticPostmortemDraft = void 0;
     this.acknowledgeLinkedAlertsWhenIncidentAcknowledged = void 0;
     this.resolveLinkedAlertsWhenIncidentResolved = void 0;
+    this.limitIncidentsToOneEpisode = void 0;
+    this.limitAlertsToOneEpisode = void 0;
     this.enableIncidentInstrumentationFixTasks = void 0;
     this.enableAlertInstrumentationFixTasks = void 0;
     this.enableAutomaticIncidentCodeFixes = void 0;
@@ -142376,6 +142379,64 @@ __decorateClass([
     type: ColumnType_default.Boolean
   })
 ], Project.prototype, "resolveLinkedAlertsWhenIncidentResolved", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadProject,
+      Permission_default.UnAuthorizedSsoUser,
+      Permission_default.ProjectUser
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  TableColumn_default({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType_default.Boolean,
+    title: "Limit Incidents to One Episode",
+    description: "When enabled, an incident can be in only one incident episode: adding an incident that is already in an episode to another one is refused, by hand, through the API, workflows and grouping rules alike. Remove it from its episode first to move it. Incidents that are already in several episodes stay in them. Off by default.",
+    defaultValue: false,
+    example: true
+  }),
+  Column({
+    nullable: false,
+    default: false,
+    type: ColumnType_default.Boolean
+  })
+], Project.prototype, "limitIncidentsToOneEpisode", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.ReadProject,
+      Permission_default.UnAuthorizedSsoUser,
+      Permission_default.ProjectUser
+    ],
+    update: [Permission_default.ProjectOwner, Permission_default.ProjectAdmin]
+  }),
+  TableColumn_default({
+    required: true,
+    isDefaultValueColumn: true,
+    type: TableColumnType_default.Boolean,
+    title: "Limit Alerts to One Episode",
+    description: "When enabled, an alert can be in only one alert episode: adding an alert that is already in an episode to another one is refused, by hand, through the API, workflows and grouping rules alike. Remove it from its episode first to move it. Alerts that are already in several episodes stay in them. Off by default.",
+    defaultValue: false,
+    example: true
+  }),
+  Column({
+    nullable: false,
+    default: false,
+    type: ColumnType_default.Boolean
+  })
+], Project.prototype, "limitAlertsToOneEpisode", 2);
 __decorateClass([
   ColumnAccessControl_default({
     create: [Permission_default.User],
@@ -350237,25 +350298,434 @@ TeamMemberCustomField = __decorateClass([
   })
 ], TeamMemberCustomField);
 
-// ../Common/Models/DatabaseModels/TeamPermission.ts
-var TeamPermission = class extends DatabaseBaseModel {
+// ../Common/Models/DatabaseModels/CustomRole.ts
+var CustomRole = class extends DatabaseBaseModel {
   constructor() {
     super(...arguments);
     this.project = void 0;
     this.projectId = void 0;
-    this.team = void 0;
-    this.teamId = void 0;
+    this.name = void 0;
+    this.description = void 0;
+    this.slug = void 0;
+    this.permissionCount = void 0;
     this.createdByUser = void 0;
     this.createdByUserId = void 0;
     this.deletedByUser = void 0;
     this.deletedByUserId = void 0;
+  }
+};
+__name(CustomRole, "CustomRole");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+    example: "My Production Project"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], CustomRole.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "a3f9c8e2-d4b6-4a7c-9e5f-1a2b3c4d5e6f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRole.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  Index(),
+  TableColumn_default({
+    required: true,
+    type: TableColumnType_default.ShortText,
+    canReadOnRelationQuery: true,
+    title: "Name",
+    description: "What the role is called, such as Incident Responder. Unique in the project, and never the name of a built-in role.",
+    example: "Incident Responder"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  })
+], CustomRole.prototype, "name", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.LongText,
+    title: "Description",
+    description: "What the role is for, in a sentence or two.",
+    example: "Declares, works and resolves incidents and alerts."
+  }),
+  Column({
+    nullable: true,
+    type: ColumnType_default.LongText,
+    length: ColumnLength_default.LongText
+  })
+], CustomRole.prototype, "description", 2);
+__decorateClass([
+  Index(),
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    required: true,
+    unique: true,
+    type: TableColumnType_default.Slug,
+    computed: true,
+    title: "Slug",
+    description: "Friendly globally unique name for your object"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.Slug,
+    length: ColumnLength_default.Slug,
+    unique: true
+  })
+], CustomRole.prototype, "slug", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.Number,
+    required: true,
+    isDefaultValueColumn: true,
+    computed: true,
+    title: "Permission Count",
+    description: "How many permissions the role holds. OneUptime keeps it as permissions are added to the role and taken out of it.",
+    defaultValue: 0,
+    example: 6
+  }),
+  Column({
+    type: ColumnType_default.Number,
+    nullable: false,
+    default: 0
+  })
+], CustomRole.prototype, "permissionCount", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Created by User",
+    description: "Relation to User who created this object (if this object was created by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "createdByUserId" })
+], CustomRole.prototype, "createdByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Created by User ID",
+    description: "User ID who created this object (if this object was created by a User)",
+    example: "c8f5e0a2-d4b7-4a8d-9e3f-2a3b4c5d6e7f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRole.prototype, "createdByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType_default.Entity,
+    title: "Deleted by User",
+    modelType: User_default,
+    description: "Relation to User who deleted this object (if this object was deleted by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "deletedByUserId" })
+], CustomRole.prototype, "deletedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Deleted by User ID",
+    description: "User ID who deleted this object (if this object was deleted by a User)",
+    example: "d9a6f1b3-e5c8-4b9e-af4d-3b4c5d6e7f8a"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRole.prototype, "deletedByUserId", 2);
+CustomRole = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Scale" /* Scale */,
+    read: "Free" /* Free */,
+    update: "Scale" /* Scale */,
+    delete: "Free" /* Free */
+  }),
+  EnableDocumentation_default(),
+  EnableAuditLog_default(),
+  TenantColumn_default("projectId"),
+  TableAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  CrudApiEndpoint_default(new Route("/custom-role")),
+  SlugifyColumn_default("name", "slug"),
+  Entity({
+    name: "CustomRole"
+  }),
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
+  }),
+  TableMetadata_default({
+    tableName: "CustomRole",
+    singularName: "Custom Role",
+    pluralName: "Custom Roles",
+    icon: IconProp_default.Identification,
+    tableDescription: "A set of permissions you name once, such as Incident Responder, and give to teams. Changing a role changes every team that has it."
+  })
+], CustomRole);
+
+// ../Common/Models/DatabaseModels/CustomRolePermission.ts
+var CustomRolePermission = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.customRole = void 0;
+    this.customRoleId = void 0;
     this.permission = void 0;
     this.labels = void 0;
-    this.isBlockPermission = void 0;
     this.scope = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
   }
 };
-__name(TeamPermission, "TeamPermission");
+__name(CustomRolePermission, "CustomRolePermission");
 __decorateClass([
   ColumnAccessControl_default({
     create: [
@@ -350271,7 +350741,915 @@ __decorateClass([
       Permission_default.SettingsAdmin,
       Permission_default.SettingsMember,
       Permission_default.SettingsViewer,
-      Permission_default.ReadProjectTeam
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+    example: "My Production Project"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], CustomRolePermission.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "a3f9c8e2-d4b6-4a7c-9e5f-1a2b3c4d5e6f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRole,
+    title: "Custom Role",
+    description: "The custom role this permission is part of.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRoleId" })
+], CustomRolePermission.prototype, "customRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    title: "Custom Role ID",
+    description: "ID of the custom role this permission is part of.",
+    example: "5f8b9c0d-e1a2-4b3c-8d5e-6f7a8b9c0d1e"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "customRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    required: true,
+    type: TableColumnType_default.Permission,
+    title: "Permission",
+    description: "A built-in role, such as IncidentMember, or a single permission, such as ReadProjectIncident. You can find the list of permissions in the Permission Reference. ProjectOwner cannot be part of a custom role.",
+    example: "IncidentMember"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText
+  })
+], CustomRolePermission.prototype, "permission", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    required: false,
+    type: TableColumnType_default.EntityArray,
+    modelType: Label,
+    title: "Labels",
+    description: "With the scope Labels: the labels this permission is limited to. A resource carrying at least one of them is reached.",
+    example: [{ name: "Production" }, { name: "Critical" }]
+  }),
+  ManyToMany(
+    () => {
+      return Label;
+    },
+    { eager: false }
+  ),
+  JoinTable({
+    name: "CustomRolePermissionLabel",
+    inverseJoinColumn: {
+      name: "labelId",
+      referencedColumnName: "_id"
+    },
+    joinColumn: {
+      name: "customRolePermissionId",
+      referencedColumnName: "_id"
+    }
+  })
+], CustomRolePermission.prototype, "labels", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  TableColumn_default({
+    isDefaultValueColumn: true,
+    type: TableColumnType_default.ShortText,
+    title: "Scope",
+    description: "Which resources this permission reaches. One of: All (every resource in the project), Owned (resources the team given the role, or one of its members, owns), Labels (resources carrying one of the labels). Defaults to All.",
+    defaultValue: "All",
+    example: "All"
+  }),
+  Column({
+    nullable: false,
+    type: ColumnType_default.ShortText,
+    length: ColumnLength_default.ShortText,
+    default: PermissionScope_default.All
+  })
+], CustomRolePermission.prototype, "scope", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Created by User",
+    description: "Relation to User who created this object (if this object was created by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "createdByUserId" })
+], CustomRolePermission.prototype, "createdByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Created by User ID",
+    description: "User ID who created this object (if this object was created by a User)",
+    example: "c8f5e0a2-d4b7-4a8d-9e3f-2a3b4c5d6e7f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "createdByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType_default.Entity,
+    title: "Deleted by User",
+    modelType: User_default,
+    description: "Relation to User who deleted this object (if this object was deleted by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "deletedByUserId" })
+], CustomRolePermission.prototype, "deletedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Deleted by User ID",
+    description: "User ID who deleted this object (if this object was deleted by a User)",
+    example: "d9a6f1b3-e5c8-4b9e-af4d-3b4c5d6e7f8a"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], CustomRolePermission.prototype, "deletedByUserId", 2);
+CustomRolePermission = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Scale" /* Scale */,
+    read: "Free" /* Free */,
+    update: "Scale" /* Scale */,
+    delete: "Free" /* Free */
+  }),
+  EnableDocumentation_default(),
+  TenantColumn_default("projectId"),
+  TableAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  CrudApiEndpoint_default(new Route("/custom-role-permission")),
+  Entity({
+    name: "CustomRolePermission"
+  }),
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
+  }),
+  TableMetadata_default({
+    tableName: "CustomRolePermission",
+    singularName: "Custom Role Permission",
+    pluralName: "Custom Role Permissions",
+    icon: IconProp_default.Lock,
+    tableDescription: "The permissions in a custom role, each with the scope and labels a team's own permission takes."
+  })
+], CustomRolePermission);
+
+// ../Common/Models/DatabaseModels/TeamCustomRole.ts
+var TeamCustomRole = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.team = void 0;
+    this.teamId = void 0;
+    this.customRole = void 0;
+    this.customRoleId = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
+  }
+};
+__name(TeamCustomRole, "TeamCustomRole");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "projectId",
+    type: TableColumnType_default.Entity,
+    modelType: Project,
+    title: "Project",
+    description: "Relation to Project Resource in which this object belongs",
+    example: "My Production Project"
+  }),
+  ManyToOne(
+    () => {
+      return Project;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "projectId" })
+], TeamCustomRole.prototype, "project", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    canReadOnRelationQuery: true,
+    title: "Project ID",
+    description: "ID of your OneUptime Project in which this object belongs",
+    example: "a3f9c8e2-d4b6-4a7c-9e5f-1a2b3c4d5e6f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "projectId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "teamId",
+    type: TableColumnType_default.Entity,
+    modelType: Team,
+    title: "Team",
+    description: "The team given the role.",
+    example: "Engineering Team"
+  }),
+  ManyToOne(
+    () => {
+      return Team;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "teamId" })
+], TeamCustomRole.prototype, "team", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    title: "Team ID",
+    description: "ID of the team given the role.",
+    example: "5f8b9c0d-e1a2-4b3c-8d5e-6f7a8b9c0d1e"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "teamId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRole,
+    title: "Custom Role",
+    description: "The custom role given to the team.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRoleId" })
+], TeamCustomRole.prototype, "customRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    required: true,
+    title: "Custom Role ID",
+    description: "ID of the custom role given to the team.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: false,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "customRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "createdByUserId",
+    type: TableColumnType_default.Entity,
+    modelType: User_default,
+    title: "Created by User",
+    description: "Relation to User who created this object (if this object was created by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "createdByUserId" })
+], TeamCustomRole.prototype, "createdByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Created by User ID",
+    description: "User ID who created this object (if this object was created by a User)",
+    example: "c8f5e0a2-d4b7-4a8d-9e3f-2a3b4c5d6e7f"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "createdByUserId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "deletedByUserId",
+    type: TableColumnType_default.Entity,
+    title: "Deleted by User",
+    modelType: User_default,
+    description: "Relation to User who deleted this object (if this object was deleted by a User)",
+    example: "admin@company.com"
+  }),
+  ManyToOne(
+    () => {
+      return User_default;
+    },
+    {
+      cascade: false,
+      eager: false,
+      nullable: true,
+      onDelete: "SET NULL",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "deletedByUserId" })
+], TeamCustomRole.prototype, "deletedByUser", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [],
+    update: []
+  }),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Deleted by User ID",
+    description: "User ID who deleted this object (if this object was deleted by a User)",
+    example: "d9a6f1b3-e5c8-4b9e-af4d-3b4c5d6e7f8a"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamCustomRole.prototype, "deletedByUserId", 2);
+TeamCustomRole = __decorateClass([
+  TableBillingAccessControl_default({
+    create: "Scale" /* Scale */,
+    read: "Free" /* Free */,
+    update: "Scale" /* Scale */,
+    delete: "Free" /* Free */
+  }),
+  EnableDocumentation_default(),
+  EnableAuditLog_default({
+    rootResource: {
+      resourceType: "Team",
+      column: "teamId"
+    },
+    resourceNameRelation: "customRole"
+  }),
+  TenantColumn_default("projectId"),
+  TableAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    delete: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.DeleteProjectTeam,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    update: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ]
+  }),
+  CrudApiEndpoint_default(new Route("/team-custom-role")),
+  Entity({
+    name: "TeamCustomRole"
+  }),
+  Index(["teamId", "customRoleId", "projectId"], { unique: true }),
+  UniqueColumnsTogether_default(
+    ["teamId", "customRoleId", "projectId"],
+    "This team already has this role."
+  ),
+  EnableWorkflow_default({
+    create: true,
+    delete: true,
+    update: true,
+    read: true
+  }),
+  TableMetadata_default({
+    tableName: "TeamCustomRole",
+    singularName: "Team Custom Role",
+    pluralName: "Team Custom Roles",
+    icon: IconProp_default.Identification,
+    tableDescription: "The custom roles a team is given. Its members can do everything the role allows."
+  })
+], TeamCustomRole);
+
+// ../Common/Models/DatabaseModels/TeamPermission.ts
+var TeamPermission = class extends DatabaseBaseModel {
+  constructor() {
+    super(...arguments);
+    this.project = void 0;
+    this.projectId = void 0;
+    this.team = void 0;
+    this.teamId = void 0;
+    this.createdByUser = void 0;
+    this.createdByUserId = void 0;
+    this.deletedByUser = void 0;
+    this.deletedByUserId = void 0;
+    this.permission = void 0;
+    this.labels = void 0;
+    this.isBlockPermission = void 0;
+    this.scope = void 0;
+    this.customRole = void 0;
+    this.customRoleId = void 0;
+    this.teamCustomRole = void 0;
+    this.teamCustomRoleId = void 0;
+    this.customRolePermission = void 0;
+    this.customRolePermissionId = void 0;
+  }
+};
+__name(TeamPermission, "TeamPermission");
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.EditProjectTeamPermissions
+    ],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
     ],
     update: []
   }),
@@ -350682,6 +352060,198 @@ __decorateClass([
     default: PermissionScope_default.All
   })
 ], TeamPermission.prototype, "scope", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRole,
+    title: "Custom Role",
+    description: "The custom role this permission comes from. Empty when the permission was given to the team directly. Change it on the role.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRoleId" })
+], TeamPermission.prototype, "customRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Custom Role ID",
+    description: "ID of the custom role this permission comes from. Empty when the permission was given to the team directly.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamPermission.prototype, "customRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "teamCustomRoleId",
+    type: TableColumnType_default.Entity,
+    modelType: TeamCustomRole,
+    title: "Team Custom Role",
+    description: "The custom role given to the team that brought this permission. Empty when the permission was given to the team directly.",
+    example: "Incident Responder"
+  }),
+  ManyToOne(
+    () => {
+      return TeamCustomRole;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "teamCustomRoleId" })
+], TeamPermission.prototype, "teamCustomRole", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Team Custom Role ID",
+    description: "ID of the custom role given to the team that brought this permission. Empty when the permission was given to the team directly.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamPermission.prototype, "teamCustomRoleId", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  TableColumn_default({
+    manyToOneRelationColumn: "customRolePermissionId",
+    type: TableColumnType_default.Entity,
+    modelType: CustomRolePermission,
+    title: "Custom Role Permission",
+    description: "The custom role's own permission this one copies. Empty when the permission was given to the team directly.",
+    example: "IncidentMember"
+  }),
+  ManyToOne(
+    () => {
+      return CustomRolePermission;
+    },
+    {
+      eager: false,
+      nullable: true,
+      onDelete: "CASCADE",
+      orphanedRowAction: "nullify"
+    }
+  ),
+  JoinColumn({ name: "customRolePermissionId" })
+], TeamPermission.prototype, "customRolePermission", 2);
+__decorateClass([
+  ColumnAccessControl_default({
+    create: [],
+    read: [
+      Permission_default.ProjectOwner,
+      Permission_default.ProjectAdmin,
+      Permission_default.ProjectMember,
+      Permission_default.Viewer,
+      Permission_default.SettingsAdmin,
+      Permission_default.SettingsMember,
+      Permission_default.SettingsViewer,
+      Permission_default.ReadProjectTeam
+    ],
+    update: []
+  }),
+  Index(),
+  TableColumn_default({
+    type: TableColumnType_default.ObjectID,
+    title: "Custom Role Permission ID",
+    description: "ID of the custom role's own permission this one copies. Empty when the permission was given to the team directly.",
+    example: "7a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
+  }),
+  Column({
+    type: ColumnType_default.ObjectID,
+    nullable: true,
+    transformer: ObjectID.getDatabaseTransformer()
+  })
+], TeamPermission.prototype, "customRolePermissionId", 2);
 TeamPermission = __decorateClass([
   TableBillingAccessControl_default({
     create: "Scale" /* Scale */,
@@ -432957,7 +434527,7 @@ var WorkspaceUserAuthToken = class extends DatabaseBaseModel {
 __name(WorkspaceUserAuthToken, "WorkspaceUserAuthToken");
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -432983,7 +434553,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "project", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433003,7 +434573,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "projectId", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [],
     update: []
   }),
@@ -433022,7 +434592,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "authToken", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433043,7 +434613,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "workspaceUserId", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433064,7 +434634,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "workspaceType", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433083,7 +434653,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "miscData", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433109,7 +434679,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "user", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433127,7 +434697,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "userId", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433153,7 +434723,7 @@ __decorateClass([
 ], WorkspaceUserAuthToken.prototype, "createdByUser", 2);
 __decorateClass([
   ColumnAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     update: []
   }),
@@ -433215,10 +434785,10 @@ __decorateClass([
 WorkspaceUserAuthToken = __decorateClass([
   TenantColumn_default("projectId"),
   TableAccessControl_default({
-    create: [Permission_default.CurrentUser],
+    create: [],
     read: [Permission_default.CurrentUser],
     delete: [Permission_default.CurrentUser],
-    update: [Permission_default.CurrentUser]
+    update: []
   }),
   CrudApiEndpoint_default(new Route("/workspace-user-auth-token")),
   Entity({
@@ -434558,7 +436128,7 @@ __decorateClass([
     required: false,
     type: TableColumnType_default.ShortText,
     title: "Auth Method",
-    description: "How this connection signs in to its provider: OAuth when someone connected it by signing in to Zoom, Google or Microsoft (Connect in Project Settings > Video Calls), AppCredentials when it uses the project's own app - a Zoom Server-to-Server OAuth app, a Google service account or a Microsoft Entra app registration. Empty for a meeting link. Fixed once created. A connection made by signing in is created by signing in, never through the API.",
+    description: "How this connection signs in to its provider: OAuth when someone connected it by signing in to Zoom, Google or Microsoft (Connect in Project Settings > Workspace > Video Calls), AppCredentials when it uses the project's own app - a Zoom Server-to-Server OAuth app, a Google service account or a Microsoft Entra app registration. Empty for a meeting link. Fixed once created. A connection made by signing in is created by signing in, never through the API.",
     example: "OAuth"
   }),
   Column({
@@ -449938,6 +451508,9 @@ var AllModelTypes = [
   TeamMember,
   TeamMemberCustomField,
   TeamPermission,
+  CustomRole,
+  CustomRolePermission,
+  TeamCustomRole,
   TeamComplianceSetting,
   ApiKey,
   Label,